What is the "svchost.exe" ?

Our database contains 5599 different files for filename svchost.exe . You can also check most distributed file variants with name svchost.exe. This files most often belongs to product Microsoft® Windows® Operating System. and were most often developed by company Microsoft Corporation. This files most often have description Host Process for Windows Services. Agregate rating is 3(3) stars - based on 111 reviews.This is executable file. You can find it running in Task Manager as the process svchost.exe.

What does svchost do?

svchost.exe is in most cases system process which hosts Windows Services. This genuine MS Windows process is marked as Generic Host Process for Win32 Services. Microsoft Windows Service is application processing background task required by system or non-system application asking for some service to run on operating system. Services have no user interface (UI) so they can't interact with user. It is common that user finds many svchost.exe processes running on every computer with MS Windows operating system. Each svchost.exe is hosting different set of services. Most of them are critical for stable run of the operating system.

Threats in svchost.exe

Some threats uses svchost.exe filename to cloak own process in task manager. All svchost.exe running in your system should be running in %SYSDIR% directory. (In most cases C:\WINDOWS\System32\). You can check it manually via Windows Task Manager or use System Explorer which automatically marks by red color all suspected svchost.exe processes. If you find some suspected svchost.exe process, check it via antivirus or virustotal service.

Troubleshooting svchost.exe

If you are experiencing performance or stability issues caused by some instance of system's svchost.exe then you must determine which service makes the problem.
You can use system commandline tool tasklist.exe /svc /fi "imagename eq svchost.exe" to enumerate all svchost instances with list of running services.
If you are not familiar with commandline tools, you can use System Explorer which shows list of hosted services in process tooltip.

If problematic process is hosting more services then you can configure this services to run in isolated processes. If you will have services isolated, you will easily find which service causes the issues. To isolate service use commandline tool sc config %service_name% type= own. To revert this setting use sc config %service_name% type= share. After change of service type you must also restart the service by commands sc stop %service_name% and sc start %service_name%.

If you are experiencing 100% cpu usage of the svchost process or cpu usage is very high for long time, most often is this issue linked to updating service but it can be something else...you must analyze it.

Problems with 100% cpu usage of svchost on Windows XP

In 10/2013 started issues with high CPU usage of the svchost caused by problems in Windows Update service. Many users are experiencing this problem and Microsoft is trying to fix it as soon as possible. This issue was still actual in 12/2013.

File details of most used file with name "svchost.exe"

Product:

Microsoft® Windows® Operating System

Company:

Microsoft Corporation

Description:

Host Process for Windows Services

Version:

6.1.7600.16385 (win7_rtm.090713-1255)

MD5:

c78655bc80301d76ed4fef1c1ea40a7d

SHA1:

619652b42afe5fb0e3719d7aeda7a5494ab193e8

SHA256:

93b2ed4004ed5f7f3039dd7ecbd22c7e4e24b6373b4d9ef8d6e45a179b13a5e8

Size:

27136

Directory:

C:\Windows\System32

Operating System:

Windows 7

Occurence:

High

Close

Check your PC with our freeware tool

System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database. This tool will help you keep your system under control.

Is the Process "svchost.exe" Safe or Threat ?

Loading Graph

36% of reviewed files are marked as Safe .56% of reviewed files are marked as Threat .22% of reviewed files are marked as System file.

Latest new variant of the file with name "svchost.exe" was discovered 34 days ago. Our database contains 496 variants of the file "svchost.exe" with final rating Safe and 715 variants with final rating Threat . Final ratings are based on file reviews, discovered date, users occurence and antivirus scan results.

Process with filename "svchost.exe" can be Safe or Threat. You must define more file attributes to determine right rating. Our freeware awards winning tool provides easiest way to check your files via our database. Tool contains many useful functions for keep your system under control and uses minimum system resources. Click Here to Download System Explorer for Free.

Filename "svchost.exe" is used by Microsoft Windows System files. Many threats uses filenames of System Processes to camouflage itself. You should consider suspected any file which uses system filename and is not stored in system directory or has invalid file version information. Correct system file contains full file version information from Microsoft.

User Reviews of the "svchost.exe"

There are multiple files in compliance with actual filter settings. All reviews for this files will be displayed.

SAFErating from user dkk for file C:\Windows\System32\svchost.exe

This is obviously some type of threat, as only recently, my CPU has spiked at 100% for long periods of time. Task Manager reveals this file as being the culprit. XP Pro, OEM reinstall twice has this issue. In past reinstalls, this hasn't been an issue.

This file ia s core part of Windows system : The file svchost.exe is the Generic Host Process. For 64-bt versions, the file is moved to the SysWOW64 directory. "In the Windows NT family of operating systems, svchost.exe (Service Host, or SvcHost) is a system process which hosts multiple Windows services" - see more on Wikipedia : http://en.wikipedia.org/wiki/Svchost.exe

svchost.exe is the "Generic Host Process" for native Windows services. The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. As a core Windows process, it can be a target for many viruses - which happend in case of this specific file. This file was infected by Backdoor.MSIL.Agent virus, clear it from Your computer. Check the MD5 version, there are many files with this name.

svchost.exe is the "Generic Host Process" for native Windows services. The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. As a core Windows process, it can be a target for many viruses - which happend in case of this specific file. This file was infected by Trojan.Win32.Generic virus, clear it from Your computer. Check the MD5 version, there are many files with this name.

SAFErating from user Moraxv for file C:\Windows\System32\svchost.exe

svchost.exe is the "Generic Host Process" for native Windows services. The Svchost.exe file is located in the %SystemRoot%\System32 folder. At startup, Svchost.exe checks the services part of the registry to construct a list of services that it must load. Multiple instances of Svchost.exe can run at the same time. As a core Windows process, it can be a target for many viruses. Check the MD5 version. More info about the file can be found directly on http://support.microsoft.com/kb/314056. Commonly, this file is marked by ativiruses as not-a-virus : Proxy-CC

In this MD5 version, this file was marked by most antiviruses as Virus.Win32.Mkar virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

In this MD5 version, this file was marked by most antiviruses as Backdoor.Win32.SdBot virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

In this MD5 version, this file was marked by most antiviruses as Trojan.Win32.VB virus. Remove it from Your computer. Scan is recommended. Check the MD5 hash and file location, there can more files with this name.

This service/File is generally part of the Microsoft operating system.. Due to the threat this file has If it is not located in %systemroot%windows/system32 Is is more than likely a virus.. If in doubt scan it with a good antivirus program.

In this MD5 version, this file was marked by most antiviruses as Win-Trojan/Unpacked virus. Remove it from Your computer. Scan is recommended.
Check the MD5 hash and file location, there can more files with this name.

Check carefully the MD5 sumcheck of this file. In this version, it is not an original part of the operating system (Generic Host Process for Win32 Services), but a Virus.Win32.Hidrag / Win32.Jeefo.A virus.

In this MD5 version, this file was marked by most antiviruses as Gen:Win32.Malware.euW@aaO!oAni virus. Remove it from Your computer. Scan is recommended.
Check the MD5 hash and file location, there can more files with this name.

The file svchost.exe is the Generic Host Process for Win32 Services used for administering 16-bit-based dynamically linked library files (DLL files) - as such it is a common target for lot of viruses.
In this MD5 version, this file was marked as Trojan-Downloader.Win32.Small by most antiviruses.

In origin, this file ia s core part of Windows system :
The file svchost.exe is the Generic Host Process for Win32 Services used for administering 16-bit-based dynamically linked library files (DLL files) including other supplementary support applications.
However, it can be and commonly is a target for lot of viruses. In this MD5 version, this file was marked by most antiviruses as Virus.Monitor.Win32.007SpySoft virus.

Check carefully the MD5 sumcheck of this file. In this version, it is not an original part of the operating system (Generic Host Process for Win32 Services), but a Trojan.Win32.Buzus.czoc familly virus.

The file svchost.exe is the Generic Host Process for Win32 Services used for administering 16-bit-based dynamically linked library files (DLL files) including other supplementary support applications. As a such file can be a common target for virus attack, so in case of any doubts scan it. Can have multiple instances in the memory.
This file should be located in the %SYSTEM% directory, this location is suspicious, even that the file was marked as not containing any virus.

Svchost.exe is system process for hosting dynamically linked services.

Add Review for "svchost.exe"

More information about the file is needed for adding user review. If you know md5 ,size, sha1,sha256 or other attribute of the file which you want to review, then you can use Advanced Search in our main page .

Check your PC with our freeware tool

System Explorer is our freeware awards winning tool which provides easy way how to check all running processes via our database. This tool will help you keep your system under control. It's real freeware, no ads or bundles, available in installer or portable distribution. Many satisfied users recommends to try it.